CVE-2026-66672

Unauthenticated PHP Object Injection in Flatastic = 2.0 versions...

CVE-2026-66673

Unauthenticated Cross Site Scripting XSS in Flatastic = 2.0 versions...

CVE-2026-66673

CVE-2026-66673 is an unauthenticated reflected Cross-Site Scripting (XSS) vulnerability in the WordPress Flatastic theme , affecting versions ≤ 2.0 . The flaw allows an attacker to inject malicious scripts that execute in the victim's browser upon interaction with a crafted link, requiring user i...

EUVD-2026-63304

Unauthenticated Cross Site Scripting XSS in Flatastic = 2.0 versions...

CVE-2026-66673 WordPress Flatastic theme <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Flatastic = 2.0 versions...

CVE-2026-66672 WordPress Flatastic theme <= 2.0 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Flatastic = 2.0 versions...

EUVD-2026-63303

Unauthenticated PHP Object Injection in Flatastic = 2.0 versions...

CVE-2026-66672

The WordPress Flatastic theme (versions ≤ 2.0) is vulnerable to unauthenticated PHP Object Injection, exploitable over the network without credentials. The Patchstack advisory documents the issue; no exploit code or in-the-wild activity is reported. Affected sites should update to a patched theme...

PT-2026-78976

Name of the Vulnerable Software and Affected Versions Flatastic versions prior to 2.1 Description An unauthenticated PHP Object Injection issue exists. PHP Object Injection occurs when untrusted input is passed to the unserialize function, allowing an attacker to manipulate serialized objects and...

PT-2026-78977

Name of the Vulnerable Software and Affected Versions Flatastic versions 2.0 and earlier Description An unauthenticated Cross Site Scripting XSS issue exists, which allows an attacker to execute malicious scripts in the browser of a user without requiring prior authentication. Recommendations...

Flatastic: Die WG-App - Customized SSL, Dangerous filesystem permissions, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Flatastic: Die WG-App published at the 'play' market has multiple vulnerabilities...